if user_name not in win_perms:
                    if 'grant' in perms[user_name] and not perms[user_name]['grant']['inherited']:
                        if 'remove_perms' not in changes:
                            changes['remove_perms'] = {}
                        changes['remove_perms'].update({user_name: perms[user_name]})